Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache bRPC

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-60021 Public exploit EPSS 26%

    Apache bRPC: Remote command injection vulnerability in heap builtin service

    Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on all platforms allows attacker to inject remote command. Root Cause: The bRPC heap profiler built-in service (/pprof/heap) does not validate the…

    Apache Software Foundation Apache bRPC